riyakhanna1983

13 ms·

91.
Ask HN: How to build “minimum-value” MVP?
17 points by riyakhanna1983 7y ago|16 comments
92.
by riyakhanna1983 7y ago
Why should we trust a company over the community? And how accurate could be the scanning? What if something is missed or if there are a lot of false positives?
93.
by riyakhanna1983 7y ago
"vetting the most dependent upon 1,500 packages would reduce the ITP ten fold, and vetting 4,000 packages would reduce it by a factor of 25"... I wonder how accurate could be this automated package vetting?
94.
by riyakhanna1983 7y ago
If the company leaders and employees have any integrity left, they should quit their jobs and do something that's actually worth doing for humanity and mankind.
95.
Automated patching of vulnerable binaries [pdf](ndss-symposium.org)
2 points by riyakhanna1983 7y ago|0 comments
96.
Mobile SDK lead generation and analysis platform targeting user growth
1 points by riyakhanna1983 7y ago|0 comments
97.
Ask HN: Is there a way to post an issue anonymously on GitHub?
1 points by riyakhanna1983 7y ago|0 comments
98.
by riyakhanna1983 7y ago
Why can't they build the eBPF bytecode offline using the correct kernel API and ship the bytecode to the Android device?
99.
Researchers build an automated system to patch vulnerable binaries [pdf](ndss-symposium.org)
1 points by riyakhanna1983 7y ago|0 comments
100.
by riyakhanna1983 7y ago
Clickable link https://appnitio.com/
101.
Show HN: Mobile market intelligence platform for your sales team
3 points by riyakhanna1983 7y ago|1 comments
102.
Show HN: Track and take down mobile apps that use copyright code.(appnitio.com)
1 points by riyakhanna1983 7y ago|0 comments
103.
FUSE performance improvements with eBPF [pdf](usenix.org)
89 points by riyakhanna1983 7y ago|32 comments
104.
Track mobile apps using your open-source code(appnitio.com)
2 points by riyakhanna1983 7y ago|0 comments
105.
by riyakhanna1983 7y ago
How will you know who's using your FOSS project?
106.
by riyakhanna1983 7y ago
Precisely. For my organization, I'm looking for a way to quantitatively measure and compare quality/security postures of repos/packages when importing.
107.
by riyakhanna1983 7y ago
Why does the quality of the repo matter? Trying to understand the reasoning.
108.
by riyakhanna1983 7y ago
I've had the same experience with existing SAST tools.
109.
by riyakhanna1983 7y ago
Snyk only checks for known vulnerabilities, not if the package itself is malicious.
110.
by riyakhanna1983 7y ago
What tools have you been using to scan NPM/Python/Ruby/Go packages for malicious dependencies? How do I know if one of the dependencies in my package is not going to steal my NPM credentials, for example?
111.
Ask HN: How do you check for malware in OSS packages?
7 points by riyakhanna1983 7y ago|7 comments
112.
by riyakhanna1983 7y ago
Hi! Is there an email I can reach out to you at?
113.
by riyakhanna1983 8y ago
How is this different from existing solutions?
114.
by riyakhanna1983 8y ago
Lock 'em up!
115.
Risks of Changing NPM Package Ownership(blog.npmjs.org)
1 points by riyakhanna1983 8y ago|0 comments
116.
The Security Risks of Changing Package Owners
1 points by riyakhanna1983 8y ago|0 comments
117.
Ask HN: How much weekly time you spend managing imported open-source
3 points by riyakhanna1983 8y ago|1 comments
118.
by riyakhanna1983 8y ago
This is a pretty extensive list. Thanks for sharing!
119.
Ask HN: Security advisories you use for tracking open-source vulnerabilities?
1 points by riyakhanna1983 8y ago|0 comments
120.
by riyakhanna1983 8y ago
Social media is not a platform to consume news. Nobody is vetting the content.

More ›